Skip to content
OpenAdvisories

Vendor

gsayed786

2 known vulnerabilities.

Products

Orion SMS OTP Verification. 1 Orion Login with SMS 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2025-7692

    Orion Login with SMS <= 1.0.5 - Authentication Bypass via Weak OTP

    The Orion Login with SMS plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.5. This is due to the olws_handle_verify_phone() function not utilizing a strong enough OTP value, exposing the hash needed to gener…

    gsayed786 Orion Login with SMS Web / CMS